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Abstract 

Let / : {—1,1}™ — > R be a real function on the hypercube, given by its discrete Fourier 
expansion, or, equivalently, represented as a multilinear polynomial. We say that it is Boolean 
if its image is in {—1, 1}. 

We show that every function on the hypercube with a sparse Fourier expansion must cither 
be Boolean or far from Boolean. In particular, we show that a multilinear polynomial with at 
most k terms must either be Boolean, or output values different than —1 or 1 for a fraction of 
at least 2/(k + 2) 2 of its domain. 

It follows that given black box access to /, together with the guarantee that its representation 
as a multilinear polynomial has at most k terms, one can test Booleanity using 0{k 2 ) queries. 
We show an f2(fc) queries lower bound for this problem. 

We also consider the problem of deciding if a function is Boolean, given its explicit represen- 
tation as a k term multilinear polynomial. The naive approach of evaluating it at every input 
has 0(kn2 n ) time complexity. For large k (i.e, exponential) we present a simple randomized 
0(fcn\/2™) algorithm. For small k we show how the problem can be solved deterministically in 
0(k 3 n). 

Our proofs crucially use Hirschman's entropic version of Heisenberg's uncertainty principle. 
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1 Introduction 



Let / be a function from {—1, l} ra to R. Equivalently, one can consider functions on {0, l} n or ZJ,, 
as we do below. A natural way to represent such a function is as a multilinear polynomial. For 
example: 

f{xi,x 2 ,x 3 ) = xi — 2x 2 x 3 + 3.5xix 2 . 

This representation is called the Fourier expansion of / and is extremely useful in many applications 
(cf., [13 ). The coefficients of the Fourier expansion of / are called the Fourier transform of /. We 
denote the Fourier transform by /, and think of it too as a function from {—1, l} n to R. 

We say that / is Boolean if f(x) = 1 or f(x) = — 1 for all x in its domain. An interesting 
question in the field of discrete Fourier analysis of Boolean functions is the following: what does 
the fact that / is Boolean tell us about its Fourier transform /? Is there a simple characterization 
of functions that are the Fourier transform of Boolean functions? 

We propose the following observation that lies at the basis of our proofs: / is Boolean if and 
only if the convolution (over ZJ?) of / with itself is equal to the delta function. This follows from 
the convolution theorem, as we show below in Claim [3~T1 

Equipped with this characterization, we consider two variations of the question of determining 
whether or not / is Boolean. First, we consider the case that we are given black box access to a 
function /, together with the guarantee that its representation as a multilinear polynomial has at 
most k terms. We show that 0(k 2 ) queries to / suffice to answer this question correctly with high 
probability. This follows from the following combinatorial result: in Theorem 11.11 we show that 
if / is not Boolean then it is not Boolean for at least a 2/(k + 2) 2 fraction of its domain. More 
generally, we show that for any set DcRof size d, either the image of / is contained in D, or else 
f{x) $ D for at least a dl/(k + d) d fraction of the domain of /. We prove an fl(k) lower bound for 
this problem. 

Booleanity testing bears resemblance to problems of property testing of functions on the hyper- 
cube (see, e.g., [3j El EJ [12]). See Section [L4l below for further discussion. 

We also consider the question of determining if / is Boolean, given its explicit representation as 
a multilinear polynomial with k terms. The naive algorithm that evaluates / at all possible inputs 
takes 0(kn2 n ), assuming that arithmetic operations over R take constant time. 

We show that, for small k, the problem can be solved deterministically in time complexity 
0(k 3 n). For large k we show that the problem can be answered correctly with high probability 
in 0(kny/2™). In the extreme case that k = 0(2 n ) - i.e., almost all the Fourier coefficients are 
non-zero - then the naive algorithm has time complexity 0(k 2 log k), whereas our algorithms runs 
in 0(k 3 / 2 logfc). 

Our proofs rely on the discrete version of Heisenberg's uncertainty principle, which can be 
viewed as an analogue of the Schwartz- Zippel lemma. We are not familiar with other applications 
of it in Computer Science, but expect that more can be found, in particular in cryptography. See 
Sections 11.31 and 11.51 below for further discussion. 

In the following Section 11.11 we present our main results, and in Sections 11.21 II. 3j, 11.41 and 11.51 
we elaborate on the background and relation to other work. Section [2] contains formal definitions, 
and proofs appear in Section [3j 

1.1 Main results 

Let J-fc be the family of functions / : {—1, l} n — > R that can be represented as a multilinear 
polynomial with at most k terms. Recall that we say that / is Boolean if its image is contained in 

{-1,1}. 
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The following theorem is a combinatorial result, stating that a function with a sparse Fourier 
expansion is either Boolean or far from Boolean. 

Theorem 1.1. Every function f £ J-k is either Boolean, or satisfies 

P* {-!,!}]> 2 



(fc + 2) 2 

where ¥ x [■] denotes the uniform distribution over the domain of f. 

We in fact prove a more general result: 

Theorem 1.2. Let D C R be a set with d elements. Then for any f G Tk one of the following 
holds. 

• Either ¥ x [/(a?) G D] = 1, 



or Pa [/(x) D] > 



(k+d) 



d I 



where ¥ x [■] denotes the uniform distribution over the domain of f. 

That is, either f's image is in D, or it is far from being in D. In particular, for D = { — 1, 1} 
(or {0, 1}, or any other set of size two), this theorem reduces to Theorem ll.il 
An immediate consequence of Theorem II .11 is the following result. 

Theorem 1.3. For every e > there exists a randomized algorithm with time complexity 0(k 2 log(l/e)) 
that, given k and oracle access to a function f G T^, 

• returns true if f is Boolean, and 

• returns false with probability at least 1 — e if f is not Boolean. 

This result can easily be extended to test whether the image of a function on the hypercube is 
contained in any finite set, using Theorem ll.2l 
We prove the following lower bound: 

Theorem 1.4. Let A be an algorithm that, given k and oracle access to a function f G J~k, 

• returns true if f is Boolean, and 

• returns false with probability at least 2/3 if f is not Boolean. 

Then A has time complexity Q(k). 

We next turn to the problem of deciding if / is Boolean given its Fourier expansion, or its 
representation multilinear polynomial. 

Theorem 1.5. For every e > there exists a randomized algorithm with time complexity O (fcn\/2™ log(l/e)) 
that, given the multilinear polynomial representation of a function / £ Jj,, 

• returns true if f is Boolean, and 

• returns false with probability at least 1 — e if f is not Boolean. 

We here think of k as large - at least of the order of 2 ra / 3 . Assuming k = 2 n (the largest it can 
be) the size of the input to the algorithm is 0(k). The naive algorithm of evaluating / at every 
possible input has time complexity O [k 2 log A;) . We reduce this to O (fe 3//2 log k) . 

For small k (i.e., k < 2 n / 3 ), we show a deterministic algorithm that outperforms the previous 
algorithm. 
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Theorem 1.6. There exists a deterministic algorithm with time complexity 0{k i n) that, given the 
multilinear polynomial representation of a function f G T^, returns true if f is Boolean and false 
otherwise. 

As before, we note that these results can be extended to test other images, using the same 
techniques. 



1.2 The Fourier transform of Boolean functions 

Let /, g be functions from ZJ? to R. Their convolution / * g is a also a function from ZJ? to R defined 
by ' 

[f* g ](x) = f{y)g{x + y), 

where the addition "x + y" is done using the group operation of Z?,. The commonly used definition 
of convolution evaluates g at x — y, whereas this one does so at x + y. But since x + x = for all 
x G Zr, then x + y = x — y, and thus this definition coincides with the usual one. 

An observation that lies at the basis of our proofs is a characterization of the Fourier transforms 
of Boolean functions: / : ZJ> — > R is the Fourier transform of a Boolean function if its convolution 
with itself is equal to the delta function: 

f*f = S. 

This is our Claim [371} it follows from the convolution theorem. Equivalently, given a function 
/ on Z?j, one can shift it by acting on it with x 6 Z 2 by [xf](y) = f(x + y). Hence the observation 
above can be stated as follows: If and only if a function is orthogonal to its shifted self, for all 
non-zero shifts in ZJ?, then it is the Fourier transform of a Boolean function. 



1.3 The uncertainly principle 

A distribution over a discrete domain S is often represented as a non-negative function / : S — > R + 
which is normalized in L\, i.e., YlxeS f( x ) = 1- 

In Quantum Mechanics the state of a particle on a domain S is represented by a complex 
function on S, and the probability to find the particle in a particular x E S is equal to |/(x)| 2 . 
Accordingly, / is normalized in L 2 , so that Ylxes I / 0*0 1 2 = 1- 

Often, the domain S is taken to be M (or some power thereof). In this continuous case one 
represents the state of a particle by a function / : R — > C such that J xeR \ f(x)\ 2 dx = 1, and then 
|/(x)| 2 is the probability density function of the distribution of the particle's position. The Fourier 
transform of /, denoted by /, is then also normalized in L2 (if one chooses the Fourier transform 
operator to be unitary), and (/(x)] 2 is the probability density function of the distribution of the 
particle's momentum. 

The Heisenberg uncertainty principle states that the variance of a particle's position times the 
variance of its momentum is at least one - under an appropriate choice of units. Besides its physical 
significance, this is also a purely mathematical statement relating a function on R to its Fourier 
transform. 

Hirschman [lOj conjectured in 1957 a stronger entropic form, namely 



f +H e f 



> 1 - In 2, 



where H e [/] = — J x£K \ f(x)\ 2 In \ f{x)\ 2 dx is the differential entropy of /. This was proved nearly 
twenty years later by Beckner pQ. 
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When the domain S is Z 2 (equivalently, {—1, l} n ) then a similar inequality holds, but with a 
different constant. Let / : Z 2 — > C have Fourier transform / : Z 2 — > C, and normalize ||/||2 = 
= 1. Then 



H 



f 



+ H 



f 



> n, 



where if [/] = -£ xeZ » |/(*)| 2 log 2 |/(x)| 2 . 



1.4 Relation to property testing 

We note that the problem of testing Booleanity is similar in structure to a property testing problem. 
Since its introduction in the seminal paper by Rubinfeld and Sudan [15], property testing has been 
studied extensively, both due to its theoretical importance, and the wide range of applications it 
spanned (cf. 0|8]). In particular, property testing of functions on the hypercube is an active area 
of research [12] . 

A typical formulation of property testing is as follows: Given a fixed property P and an input 
/, a property tester is an algorithm that distinguishes with high probability between the case that 
/ satisfies P, and the case that / is e-far from satisfying it, according to some notion of distance. 

The algorithm we present for testing Booleanity given oracle access is similar to a property 
testing algorithm. However, in our case there is no proximity parameter: we show that if a function 
is not Boolean then it must be far from Boolean, and can therefore be proved to not be Boolean by 
a small number of queries. This type of property testing algorithms have appeared in the context 
of the study of adaptive versus non-adaptive testers [9]. 



1.5 Discussion and open questions 

In this paper we use a discrete entropy uncertainty principle to both prove a combinatorial statement 
concerning functions on the hypercube, and to construct algorithms for computational problems. 
To the best of our knowledge, this is the first time this tool has been used in the context of 
theoretical computer science. 

The discrete uncertainty principle is, in a sense, a dual to the Schwartz- Zippel lemma [171 116] : 
both limit the number of roots of a polynomial, given that it is sparse. Given the usefulness of 
the Schwartz-Zippel lemma, we suspect that more combinatorial applications can be found for the 
discrete uncertainty principle. 

For example, Biham, Carmeli and Shamir |2] show that an RSA dechiperer who uses hardware 
that has been maliciously altered can be vulnerable to an attack resulting in the revelation of the 
private key. The assumption is that the dechiperer is not able to discover that it is using faulty 
hardware, because the altered function returns a faulty output for only a very small number of 
inputs. The uncertainty principle shows that such malicious alteration is impossible to accomplish 
with succinctly represented functions: when the Fourier transform of a function is sparse then it is 
impossible to "hide" elements in its image. 

As for the scope of this study, many questions still remains open. In particular, there is a gap 
between the lower bound and the upper bound for testing Booleanity with oracle access; we are 
disinclined to guess which of the two is not tight. 



2 Definitions 

The following definitions are mostly standard. We deviate from common practice by considering 
both a function and its Fourier transform to be defined on the same domain, namely Z 2 . Some 
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readers might find {0, l} n or { — 1, l} n a more familiar domain for a function, and likewise the power 
set of [n] a more familiar domain for its Fourier transform. 

Denote Z 2 = Z/2Z. For x,y G ZJ? we denote by x + y the sum using the ZJ? group operation. 
The equivalent operation in {—1, 1}™ is pointwise multiplication. 

Let / : Z£ ->• R. We denote its L 2 -norm by 



(i) 



denote its support by 
and denote its entropy by 



supp/ = {xGZ 2 t : f(x)^0}, 



H[f] = -J2 f(xflogf(x) 2 , 



(2) 
(3) 



where logarithms are base two and log = 0, by the usual convention is this case. 

We call a function / : Z 2 — > R Boolean if its image is in { — 1, 1}, i.e., if f(x) G {—1, 1} for all 

x e 1%. 

Let / : Z 2 — > M denote the discrete Fourier transform (also known as the Walsh-Fourier 
transform and Hadamard transform) of /, or its representation as a multilinear polynomial: 



= f(y)x y (x), 

where the characters are defined by 



(4) 



Z)i :i/i =i x * - 1 



1—1 otherwise 

Note that the sum Y2i- yi =i x « ^ s over ^2 and that X{,yi are (respectively) the i'th coordinate of x 
and y. It follows that the discrete Fourier expansion of / is 



f(x) = £ /(y)xy(*). 



(5) 



We denote by the family of functions / : Z 2 
We define 5 : 1% -»• R by 



for which | supp/| < fc. 



S(x) 



1 when x = (0, . . . , 0) 
otherwise 



If we denote by l(x) 
easy to verify that 



by 



Given functions /, g : Z 2 



the constant function such that l(x) = 1 for all x G Z 2 , then it is 

i = 5. (6) 
R, their convolution f * g is also a function from Z 2 to R, defined 



[f*g](x) = Yl f(v)9( x + y)- 



(7) 
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We denote 



f (2) = f*f, 



and more generally is the convolution of / with itself k times. is taken to equal 5, since 
f*S = f. 



3 Results 

3.1 The Fourier transform of Boolean functions 

The convolution theorem (see., e.g., [11] ) for ZJ? states that the Fourier transform of the pointwise 
multiplication of two functions is equal to the convolution of their Fourier transforms. Since the 
Fourier transform operator is its own inverse - up to a constant - then it follows that the Fourier 
transform of the convolution is equal to the pointwise product of the Fourier transforms - up to a 
constant: 

f~g = f*g, and f7g = 2 n j-g. (8) 
The correctness of the constants can be verified by, for example, setting / = g = 1. 
Claim 3.1. / : Z£ -> R is Boolean iff f*f = 5. 

Proof. Recall that a function is Boolean if its image is in {—1, 1}. Hence / : Zg — > R is Boolean iff 
f 2 = 1. Applying the Fourier transform to both sides yields f 2 = 5, by Eq. [6l By Eq. Owe have 
that f 2 = f * f , and the claim follows. 



More generally, let / be such that its image is in D 
and so 



,y d }. Then (f-yi, 



□ 

(f-y d ) = o, 



(/ - yiS) *•••*(/- yd$) = o. 



(9) 



3.2 The discrete uncertainty principle 

The discrete uncertainty principle for Zg is the following. 
Theorem 3.2. For any f : -)• R such that \\f\\ > it holds that 



H 



f 



+ H 



f 



> n. 



(10) 



Proof. Let U be a unitary n by n matrix such that maxjj \v,ij\ = M. Let x £ C n be such that 
|| a; || > 0. Then Theorem 23 in Dembo, Cover and Thomas [3] states that 



H 



x 

\x\\ 



+ H 



Ux 
Wx\ 



> 21og(l/M). 



Let F be the matrix representing the Fourier transform operator on Z^. Note that by our 
definition in Eq. 01 the transform operator F is not unitary. However, if we multiply it by y2" (i.e., 
normalize the characters Xy) then it becomes unitary. The normalized matrix elements (which are 
equal to the elements of the normalized characters \y) , are an equal to ±l/v2"- Hence M = 1/ \/2™, 
and 



H 



f 



+ H 



Ff 
\\Ff\\ 



> 21og(l/M) = n. 



□ 
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Note that equality is achieved for any character Xy> or alternatively for a Fourier transform of 
a character, which is a shifted delta function; in this case the entropy of the character is n and the 
entropy of its transform is zero. It has, in fact, been shown that equality is achieved only in these 
cases [H]. 

A distribution supported on a set of size k has entropy at most log/c, as can be shown by 
calculating its Kullback-Leibler divergence from the uniform distribution. Hence any distribution 
with entropy log/c has support of size at least k. This fact, together with the discrete uncertainty 
principle, yields the following claim. 



Claim 3.3. For any f : Z% 



such that 



> it holds that 



supp/| • |supp/| > 2 n . 



(11) 



Proof. By Theorem 13.21 we have that 



H 



f 



+ H 



f 



> n. 



Since log|supp(/)| = log |supp(//||/||)| >i?[//||/||] then 

|supp/| • |supp/| > 2 n , 

It follows that 



□ 



max{|supp/|,|supp/|} > V2* 



(12) 



3.3 Testing Booleanity of a function given as a polynomial 

Before proposing our algorithm for testing Booleanity we state and prove the following standard 
claim, which relates the support of functions / and g with the support of their convolution. 

Claim 3.4. Let g,f:ZQ->R. Then 

supp / * g C supp / + supp g. 

Here supp / + supp g is the set of elements of Z?j that can be written as the sum of an element 
in supp / and an element in supp g. 

Proof. Let x £ supp f * g. Then, from the definition of convolution, there exist y and z such that 
f(y) ^ 0, g(z) ^ and x = y + z. Hence x 6 supp / + suppg. □ 

Remark 3.5. Note that \ supp / + supp g\ is at most |supp/| • |suppg|. Since the straightforward 
calculation of[f*g](x) using Eq.^7\takes 0(\ supp/|-n) then calculating all of f*g takes 0(\ supp/| 2 - 
| supp<?| • n). In particular, the calculation of f * f takes 0(\ supp/| 3 • n). 

We are now ready to propose the following algorithm for testing if a function / : — > M. is 
Boolean, given its representation as a multilinear polynomial, i.e., given / with support size k. We 
here think of k as large - at least 2 n / 3 . Arithmetic operations over the reals are assumed to take 
unit time. 

Theorem 3.6. Given f G T^, Algorithm 1 has time complexity O ffcnv2"dog(l/e)) . Furthermore, 
if f is Boolean then the algorithm returns "true", and if f is not Boolean then it returns "false" 
with probability at least 1 — e. 
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Algorithm 1 

for i 6 {1, ... , \/2™ log(l/e)} do 

Draw x uniformly at random from 

Calculate f(x) and f^ 2 \x) 

if f(x) {-1, 1} or fW(x) - 5{x) / then 
return "false" 

end if 
end for 
return "true" 



Theorem 11.51 is a direct consequence of this theorem. 

Proof. Given / with support of size k, calculating f(x) takes 0(kn), as does the calculation of 
f( 2 '(x), using Eqs. [5]and[71 respectively, since the sums need only be taken over the support of / 
(see Remark 13 . 5|> . Hence the total time complexity is indeed O (fen\/2™ log(l/e)) . 

If / is Boolean, then f(x) S {—1, 1} for all x, and by Claim [3TT1 it holds that f f - 2 \x) = 5(x) for 
all x. Hence the algorithm will return "true". 

If / is not Boolean, then f(x) 2 — 1 7^ for some x, and so ||/ 2 — 1|| > 0. Since 

p^l = /( 2 ) - 5 

then by Eq. [12] we have that 

max 1 1 supp f 2 — 1| , I supp — 5\ | > \/2™. 

Therefore, at each iteration, the algorithm will return "false" with probability at least 1 /v2*S and 
the theorem follows since we repeat this for v2"log(l/e) iterations. □ 

This algorithm can be straightforwardly extended to testing whether the image of / is in some 
set D = {yi, . . . , yd} of size d. The number of iterations is identical, but at each iteration the test 
is different: The first test is replaced with checking if f(x) is in D, and the second is replaced with 
checking if 

(/(x) - yi 5(x)) (/>) - y d 5{x)) = 0, 

as suggested by Eq. [9j 

The support of f — yi5 is at most k+1, and so the support of the first d/2 terms of the expression 
above is of size 0(k d / 2 ), by Claim [M The same holds for the last d/2 terms. 

Since convolution is associative then we can calculate the convolution of the first d/2 terms, 
calculate the convolution of the last d/2 terms, and then convolve the results, making altogether 
d convolutions, each of which takes 0(k d ^ 2 n). Hence this calculation takes 0(k d ^ 2 nd), and the 
algorithm's time complexity is O {k d / 2 dn^/2~^\og{l/ej) . 

For k < 2 n / 3 there exists a faster, deterministic algorithm to decide if / is Boolean: given /, 
calculate / * / and compare it to 5. Correctness follows directly from Claim [3TTT This can be done 
in 0(k 3 n) (see Remark 13. 5p . and so Theorem 11.61 follows. For k < 2 n / 3 , this algorithm is faster 
than Algorithm 1. 
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3.4 Testing Booleanity given oracle access 

In this section we consider a function / € J~k to which we are given oracle access. We are asked to 
determine if it is Boolean, or more generally if its image is in some small set D. We here think of 
k as being small - say polynomial in n. 

We first prove the following combinatorial result: 

Theorem (jl.2|) . Let D C M be a set with d elements. Then for any / £ ^ one of the following 
holds. 

• Either F x [f(x) G D) = 1, 

. or^ x [f(x)^D\> T ^ w , 
where P x [•] denotes the uniform distribution over the domain of f. 
Proof. Let D = {yi, . . . , yd}- Denote 

d 

a = Y[{f - Vi), 

i=l 

so that g(x) = iff f(x) £ D. Then 

g=(f- vi*) *■■■*(/- y d s) = + oo-JW + • • • oi/ + a <5, 
for some coefficients ao, . . . , a^-i. Therefore 

d 

supppC |Jsupp/«. (13) 

i=0 

We show that | suppp| < (k + d) d /d\. Let A = supp/U{0}. Then by Claim [33] supp /W is a subset 
of Zj4 = j4 + • • • + A, where the sum is taken i times; this is the set of elements in ZJJ - that can be 
written as a sum of i elements of A. Hence 



supp g C A U 2A U • • • U dA. 



Since £ A, then for alH < d we have that iA C dA. Hence 

supp g C dA. 

Therefore supp^ is a subset of the set of elements that can be written as the sum of at most d 
elements of A. This number is bounded by the number of ways to choose d elements of A with 
replacement, disregarding order. Hence 

f\A\-l + d\ (k + df 
|su PP5 |<^ d J<^^, (14) 

since \A\ < \ supp/| + 1 = k + 1. 

Now, if f(x) G D then clearly [f(x) £ D] = 1. Otherwise, g(x) is different than zero for some 
x, and so \\g\\ > 0. Hence we can apply Claim [3731 and 

| supp g\ • | supp g\ > 2 n . 
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By Eq. [T5] this implies that 

2 n d\ 

|supp£[| > 



(k + d) d ~ 

Since the support of g is precisely the set of x 6 for which f{x) ^ D then it follows that 

d\ 



W x \f{x) D] > 



(k + d) d ' 

□ 



A consequence is that a function that is not Boolean (i.e., the case D = { — 1, 1}) is not Boolean 
over a fraction of at least 2/(k + 2) 2 of its domain. Theorem 11.31 is a direct consequence of this 
result: the algorithm samples / at random ^(k + 2) 2 log(l/e) times, and therefore will discover an 
x such that f(x) { — 1, 1} with probability at least 1 — e - unless / is Boolean. 

While we were not able to show a tight lower bound, we show that any algorithm would require 
at least Q(k) queries to perform this task. 



Proof of Theorem \l-4\ Let A be an algorithm that is given oracle access to a function / : ZJ? — > M, 
together with the guarantee that supp/ < k. When / is Boolean then A returns "true". When / 
is not Boolean then / returns "false" with probability at least 1 — e. We show that A makes Q(k) 
queries to /. 

Denote by the set of Boolean functions that depend only on the first log k coordinates. 
Denote by Ck the set of functions that likewise depend only on the first log k coordinates, return 
values in {—1, 1} for some k — 1 of the k possible values of the first log k coordinates, but otherwise 
return 2. Note that functions in both Bk and Ck have Fourier transforms of support of size at most 
k. 

We use Yao's Minmax principle in order to prove a lower bound for a randomized algorithm. 
For this purpose, we present two distributions: one for which the algorithm should return "false" 
(denoted by T>q) and another for which the algorithm should return "true" (denoted by T>\). We 
prove that any randomized algorithm which performs at most o(k) queries would not be able to 
distinguish between the two distributions with non-negligible probability. This proves the claim. 

Let T>\ be the uniform distribution over Bk, and let T>q be the uniform distribution over Ck- 
Observe that an arbitrary query to / in either distribution would output a non-Boolean value with 
probability at most 1/fc, independently of previous queries with different values of the first log k 
coordinates. Therefore any algorithm that performs o{k) queries would find an input for which 
f(x) = 2 with probability o(l), and would therefore be unable to distinguish between T>q and T>\ 
with noticeable probability. □ 
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